CVE-2022-49008

can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down

published October 21, 2024

CVSS
—
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down

In can327_feed_frame_to_netdev(), it did not free the skb when netdev

is down, and all callers of can327_feed_frame_to_netdev() did not free

allocated skb too. That would trigger skb leak.

Fix it by adding kfree_skb() in can327_feed_frame_to_netdev() when netdev

is down. Not tested, just compiled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Published
2024-10-21T20:06Z
EPSS history
Timeline
  • 21 OCT 20:06Z
    can: can327: can327_feed_frame_to_netdev(): fix potential skb leak when netdev is down
    cvelistv5